pool/apparmor
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 973084 from home:dimstar:Factory

Browse Source 
- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).

OBS-URL: https://build.opensuse.org/request/show/973084
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=328
This commit is contained in:
Christian Boltz 2022-04-27 12:32:57 +00:00 committed by Git OBS Bridge
parent f1c2c7aee9
commit a9656c2801
2 changed files with 12 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
apparmor.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Wed Apr 27 10:07:47 UTC 2022 - Dominique Leuenberger <dimstar@opensuse.org>
- Enhance zgrep-profile-mr870.diff to also allow/support zstd
(boo#1198922).
------------------------------------------------------------------- -------------------------------------------------------------------
Sat Apr 16 20:33:13 UTC 2022 - Christian Boltz <suse-beta@cboltz.de> Sat Apr 16 20:33:13 UTC 2022 - Christian Boltz <suse-beta@cboltz.de>

11
zgrep-profile-mr870.diff
View File

@ -13,12 +13,11 @@ This prevents exploiting https://www.openwall.com/lists/oss-security/2022/04/08/
1 file changed, 59 insertions(+) 1 file changed, 59 insertions(+)
create mode 100644 profiles/apparmor.d/zgrep create mode 100644 profiles/apparmor.d/zgrep
diff --git a/profiles/apparmor.d/zgrep b/profiles/apparmor.d/zgrep Index: apparmor-3.0.4/profiles/apparmor.d/zgrep
new file mode 100644 ===================================================================
index 000000000..0bf0765d1
--- /dev/null --- /dev/null
+++ b/profiles/apparmor.d/zgrep +++ apparmor-3.0.4/profiles/apparmor.d/zgrep
@@ -0,0 +1,60 @@ @@ -0,0 +1,62 @@
+# ------------------------------------------------------------------ +# ------------------------------------------------------------------
+# +#
+# Copyright (C) 2021 Christian Boltz +# Copyright (C) 2021 Christian Boltz
@ -50,6 +49,7 @@ index 000000000..0bf0765d1
+ /usr/bin/xz Cx -> helper, + /usr/bin/xz Cx -> helper,
+ /usr/bin/xzgrep r, + /usr/bin/xzgrep r,
+ /usr/bin/zgrep Cx -> helper, + /usr/bin/zgrep Cx -> helper,
+ /usr/bin/zstd Cx -> helper,
+ owner /tmp/zgrep* rw, + owner /tmp/zgrep* rw,
+ /usr/bin/zgrep r, + /usr/bin/zgrep r,
+ +
@ -66,6 +66,7 @@ index 000000000..0bf0765d1
+ /usr/bin/grep mr, + /usr/bin/grep mr,
+ /usr/bin/gzip mr, + /usr/bin/gzip mr,
+ /usr/bin/xz mr, + /usr/bin/xz mr,
+ /usr/bin/zstd mr,
+ /{,**} r, + /{,**} r,
+ +
+ } + }